The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, when using the Jenkins user database security realm.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jun 22, 2022 |
| Freebsd | — | Upgrade jenkinsUpgrade jenkins-lts | Nov 4, 2022 | Jun 22, 2022 |
| Jenkins 2022 06 22 | — | Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to the latest versionUpgrade Jenkins LTS to version 2.332.4Upgrade Jenkins to version 2.356 | Jul 12, 2022 | Jun 22, 2022 |
| Redhat Openshift | — | Upgrade jenkins | Jan 13, 2023 | Jun 22, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub